Bug 2437111 (CVE-2025-68121)

Summary:	CVE-2025-68121 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aazores, abarbaro, abrianik, adistefa, akostadi, akoudelk, alcohan, alebedev, alizardo, amasferr, amctagga, anjoseph, anpicker, ansmith, anthomas, aoconnor, aruklets, asatyam, ataylor, bdettelb, bniver, bparees, chfoley, ckandaga, cmah, crizzo, csutherl, dakwon, dbruscin, dhanak, diagrawa, dkeler, dmayorov, doconnor, drosa, dschmidt, dsimansk, dsoumis, dymurray, eaguilar, ebaron, eborisov, eglynn, ehelms, ehugonne, erezende, ewittman, fdeutsch, flucifre, ggainey, ggrzybek, gmeno, gparvin, groman, hasun, ibolton, janstey, jbalunas, jbritton, jburrell, jcantril, jchui, jclere, jeder, jfula, jhe, jjoyce, jkoehler, jlanda, jlledo, jmatsuok, jmatthew, jmontleo, jolong, jowilson, jpasqual, jprabhak, jpretori, jraez, jschluet, jscholz, jtolenti, juwatts, jwon, kingland, kshier, ktsao, kvanderr, kverlaen, lball, lbragsta, lchilton, lgamliel, lhh, lphiri, manissin, mattdavi, matzew, mbenjamin, mbocek, mburns, mdellweg, mgarciac, mhackett, mhess, mhulan, mnovotny, mrunge, mwringe, nboldt, ngough, nipatil, nmoumoul, nyancey, oaljalju, ometelka, oramraz, osousa, pahickey, pantinor, parichar, pcreech, peholase, pgaikwad, pjindal, plodge, psrna, ptisnovs, pvasanth, rchan, rekumar, rfreiman, rgodfrey, rhaigner, rhel-process-autobot, rjohnson, rkubis, rmaucher, rojacob, sabiswas, sakbas, sausingh, sbratsla, sdawley, sfeifer, simaishi, slucidi, smallamp, smalloy, smcdonal, smullick, sostapov, sseago, stcannon, stirabos, suppawar, swoodman, syedriko, szappis, tasato, teagle, thason, tmalecek, tsedmik, tzivkovi, vereddy, veshanka, vimartin, vkarehfa, vle, vvoronko, vwilson, watson-tool-maintainers, wenshen, whayutin, wtam, xdharmai, yguenane
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2439295
Bug Blocks:

Description OSIDB Bzimport 2026-02-05 18:01:53 UTC

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.

Comment 3 errata-xmlrpc 2026-02-16 09:35:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:2706 https://access.redhat.com/errata/RHSA-2026:2706

Comment 4 errata-xmlrpc 2026-02-16 09:59:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:2708 https://access.redhat.com/errata/RHSA-2026:2708

Comment 5 errata-xmlrpc 2026-02-16 10:28:16 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:2709 https://access.redhat.com/errata/RHSA-2026:2709

Comment 6 errata-xmlrpc 2026-02-18 11:26:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:2914 https://access.redhat.com/errata/RHSA-2026:2914

Comment 7 errata-xmlrpc 2026-02-18 12:50:14 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:2920 https://access.redhat.com/errata/RHSA-2026:2920

Comment 14 errata-xmlrpc 2026-02-23 01:24:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3035 https://access.redhat.com/errata/RHSA-2026:3035

Comment 15 errata-xmlrpc 2026-02-23 02:07:32 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3040 https://access.redhat.com/errata/RHSA-2026:3040

Comment 16 errata-xmlrpc 2026-02-23 15:30:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3092 https://access.redhat.com/errata/RHSA-2026:3092

Comment 17 errata-xmlrpc 2026-02-24 11:31:45 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3192 https://access.redhat.com/errata/RHSA-2026:3192

Comment 18 errata-xmlrpc 2026-02-24 11:32:55 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3187 https://access.redhat.com/errata/RHSA-2026:3187

Comment 19 errata-xmlrpc 2026-02-24 11:36:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3188 https://access.redhat.com/errata/RHSA-2026:3188

Comment 20 errata-xmlrpc 2026-02-24 11:54:48 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3193 https://access.redhat.com/errata/RHSA-2026:3193

Comment 21 errata-xmlrpc 2026-02-25 07:34:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3291 https://access.redhat.com/errata/RHSA-2026:3291

Comment 22 errata-xmlrpc 2026-02-25 09:04:37 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3297 https://access.redhat.com/errata/RHSA-2026:3297

Comment 23 errata-xmlrpc 2026-02-25 09:04:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3297 https://access.redhat.com/errata/RHSA-2026:3297

Comment 24 errata-xmlrpc 2026-02-25 09:04:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3297 https://access.redhat.com/errata/RHSA-2026:3297

Comment 25 errata-xmlrpc 2026-02-25 09:26:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3298 https://access.redhat.com/errata/RHSA-2026:3298

Comment 26 errata-xmlrpc 2026-02-25 09:26:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3298 https://access.redhat.com/errata/RHSA-2026:3298

Comment 27 errata-xmlrpc 2026-02-25 09:26:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3298 https://access.redhat.com/errata/RHSA-2026:3298

Comment 28 errata-xmlrpc 2026-02-25 11:24:10 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3336 https://access.redhat.com/errata/RHSA-2026:3336

Comment 29 errata-xmlrpc 2026-02-25 11:24:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3336 https://access.redhat.com/errata/RHSA-2026:3336

Comment 30 errata-xmlrpc 2026-02-25 11:24:12 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3336 https://access.redhat.com/errata/RHSA-2026:3336

Comment 31 errata-xmlrpc 2026-02-25 11:42:08 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3337 https://access.redhat.com/errata/RHSA-2026:3337

Comment 32 errata-xmlrpc 2026-02-25 11:46:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3343 https://access.redhat.com/errata/RHSA-2026:3343

Comment 33 errata-xmlrpc 2026-02-25 12:08:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3341 https://access.redhat.com/errata/RHSA-2026:3341

Comment 34 errata-xmlrpc 2026-02-25 12:10:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3340 https://access.redhat.com/errata/RHSA-2026:3340

Comment 35 errata-xmlrpc 2026-02-26 02:56:43 UTC

This issue has been addressed in the following products:

  Cryostat 4 on RHEL 9

Via RHSA-2026:3186 https://access.redhat.com/errata/RHSA-2026:3186

Comment 37 errata-xmlrpc 2026-03-02 06:39:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3506 https://access.redhat.com/errata/RHSA-2026:3506

Comment 38 errata-xmlrpc 2026-03-04 15:24:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3752 https://access.redhat.com/errata/RHSA-2026:3752

Comment 39 errata-xmlrpc 2026-03-04 15:43:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3753 https://access.redhat.com/errata/RHSA-2026:3753

Comment 40 errata-xmlrpc 2026-03-05 05:37:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3816 https://access.redhat.com/errata/RHSA-2026:3816

Comment 41 errata-xmlrpc 2026-03-05 06:18:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3817 https://access.redhat.com/errata/RHSA-2026:3817

Comment 42 errata-xmlrpc 2026-03-05 07:46:15 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3831 https://access.redhat.com/errata/RHSA-2026:3831

Comment 43 errata-xmlrpc 2026-03-05 08:16:39 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3833 https://access.redhat.com/errata/RHSA-2026:3833

Comment 44 errata-xmlrpc 2026-03-05 09:33:57 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3840 https://access.redhat.com/errata/RHSA-2026:3840

Comment 45 errata-xmlrpc 2026-03-05 09:51:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3843 https://access.redhat.com/errata/RHSA-2026:3843

Comment 46 errata-xmlrpc 2026-03-05 10:03:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3839 https://access.redhat.com/errata/RHSA-2026:3839

Comment 47 errata-xmlrpc 2026-03-05 11:18:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3842 https://access.redhat.com/errata/RHSA-2026:3842

Comment 48 errata-xmlrpc 2026-03-05 11:31:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3864 https://access.redhat.com/errata/RHSA-2026:3864

Comment 49 errata-xmlrpc 2026-03-05 14:26:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3898 https://access.redhat.com/errata/RHSA-2026:3898

Comment 50 errata-xmlrpc 2026-03-05 16:35:12 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3928 https://access.redhat.com/errata/RHSA-2026:3928

Comment 51 errata-xmlrpc 2026-03-05 17:17:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3929 https://access.redhat.com/errata/RHSA-2026:3929

Comment 52 errata-xmlrpc 2026-03-09 01:24:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3970 https://access.redhat.com/errata/RHSA-2026:3970

Comment 53 errata-xmlrpc 2026-03-09 01:28:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3971 https://access.redhat.com/errata/RHSA-2026:3971

Comment 54 errata-xmlrpc 2026-03-09 01:48:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3977 https://access.redhat.com/errata/RHSA-2026:3977

Comment 55 errata-xmlrpc 2026-03-09 02:05:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3985 https://access.redhat.com/errata/RHSA-2026:3985

Comment 56 errata-xmlrpc 2026-03-10 09:22:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:4166 https://access.redhat.com/errata/RHSA-2026:4166

Comment 57 errata-xmlrpc 2026-03-10 09:24:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:4164 https://access.redhat.com/errata/RHSA-2026:4164

Comment 58 errata-xmlrpc 2026-03-10 12:08:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:4174 https://access.redhat.com/errata/RHSA-2026:4174

Comment 59 errata-xmlrpc 2026-03-10 19:17:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:4177 https://access.redhat.com/errata/RHSA-2026:4177

Comment 60 errata-xmlrpc 2026-03-11 05:13:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:4256 https://access.redhat.com/errata/RHSA-2026:4256

Comment 61 errata-xmlrpc 2026-03-11 05:59:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:4264 https://access.redhat.com/errata/RHSA-2026:4264

Comment 62 errata-xmlrpc 2026-03-11 07:33:39 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:4267 https://access.redhat.com/errata/RHSA-2026:4267

Comment 63 errata-xmlrpc 2026-03-17 03:46:14 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:4672 https://access.redhat.com/errata/RHSA-2026:4672

Comment 64 errata-xmlrpc 2026-03-18 08:02:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:4892 https://access.redhat.com/errata/RHSA-2026:4892

Comment 65 errata-xmlrpc 2026-03-18 10:57:14 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:4907 https://access.redhat.com/errata/RHSA-2026:4907

Comment 66 errata-xmlrpc 2026-03-18 10:58:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:4901 https://access.redhat.com/errata/RHSA-2026:4901

Comment 67 errata-xmlrpc 2026-03-18 21:06:34 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:4952 https://access.redhat.com/errata/RHSA-2026:4952

Comment 68 errata-xmlrpc 2026-03-19 15:58:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:5146 https://access.redhat.com/errata/RHSA-2026:5146

Comment 69 errata-xmlrpc 2026-03-19 23:38:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:5077 https://access.redhat.com/errata/RHSA-2026:5077

Comment 70 errata-xmlrpc 2026-03-26 20:26:00 UTC

This issue has been addressed in the following products:

  Red Hat Satellite 6.17 for RHEL 9

Via RHSA-2026:5970 https://access.redhat.com/errata/RHSA-2026:5970

Comment 71 errata-xmlrpc 2026-03-26 20:26:56 UTC

This issue has been addressed in the following products:

  Red Hat Satellite 6.16 for RHEL 8
  Red Hat Satellite 6.16 for RHEL 9

Via RHSA-2026:5971 https://access.redhat.com/errata/RHSA-2026:5971

Comment 72 errata-xmlrpc 2026-03-31 16:03:19 UTC

This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.6 for RHEL 9
  Red Hat Ansible Automation Platform 2.6 for RHEL 10

Via RHSA-2026:6277 https://access.redhat.com/errata/RHSA-2026:6277

Comment 73 errata-xmlrpc 2026-03-31 16:11:22 UTC

This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.5 for RHEL 8
  Red Hat Ansible Automation Platform 2.5 for RHEL 9

Via RHSA-2026:6278 https://access.redhat.com/errata/RHSA-2026:6278

Comment 74 errata-xmlrpc 2026-04-01 09:24:16 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2026:5866 https://access.redhat.com/errata/RHSA-2026:5866

Comment 75 errata-xmlrpc 2026-04-01 10:12:12 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:5876 https://access.redhat.com/errata/RHSA-2026:5876

Comment 78 errata-xmlrpc 2026-04-09 08:25:25 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:6552 https://access.redhat.com/errata/RHSA-2026:6552

Comment 79 errata-xmlrpc 2026-04-13 12:42:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:7854 https://access.redhat.com/errata/RHSA-2026:7854

Comment 81 errata-xmlrpc 2026-04-20 18:45:01 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9097 https://access.redhat.com/errata/RHSA-2026:9097

Comment 82 errata-xmlrpc 2026-04-20 18:46:22 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9098 https://access.redhat.com/errata/RHSA-2026:9098

Comment 83 errata-xmlrpc 2026-04-20 19:48:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9109 https://access.redhat.com/errata/RHSA-2026:9109

Comment 84 errata-xmlrpc 2026-04-20 19:49:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9108 https://access.redhat.com/errata/RHSA-2026:9108

Comment 125 errata-xmlrpc 2026-04-29 04:15:09 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Services on OpenShift 18.0

Via RHSA-2026:7885 https://access.redhat.com/errata/RHSA-2026:7885

Comment 126 errata-xmlrpc 2026-04-29 14:23:20 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:11749 https://access.redhat.com/errata/RHSA-2026:11749

Comment 127 errata-xmlrpc 2026-04-30 02:53:26 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12029 https://access.redhat.com/errata/RHSA-2026:12029

Comment 128 errata-xmlrpc 2026-04-30 02:55:29 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12028 https://access.redhat.com/errata/RHSA-2026:12028

Comment 129 errata-xmlrpc 2026-04-30 03:21:44 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12031 https://access.redhat.com/errata/RHSA-2026:12031

Comment 130 errata-xmlrpc 2026-04-30 03:24:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12030 https://access.redhat.com/errata/RHSA-2026:12030

Comment 131 errata-xmlrpc 2026-04-30 03:27:17 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12032 https://access.redhat.com/errata/RHSA-2026:12032

Comment 132 errata-xmlrpc 2026-04-30 03:29:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12033 https://access.redhat.com/errata/RHSA-2026:12033

Comment 135 errata-xmlrpc 2026-05-04 23:38:16 UTC

This issue has been addressed in the following products:

  Streams for Apache Kafka 3.2.0

Via RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:13571

Comment 136 errata-xmlrpc 2026-05-07 18:11:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:14868 https://access.redhat.com/errata/RHSA-2026:14868

Comment 137 errata-xmlrpc 2026-05-11 22:43:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2026:16102 https://access.redhat.com/errata/RHSA-2026:16102

Comment 138 errata-xmlrpc 2026-05-13 01:52:23 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:16696 https://access.redhat.com/errata/RHSA-2026:16696

Comment 139 errata-xmlrpc 2026-05-13 13:15:45 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:17040 https://access.redhat.com/errata/RHSA-2026:17040

Comment 140 errata-xmlrpc 2026-05-13 15:36:08 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:17084 https://access.redhat.com/errata/RHSA-2026:17084

Comment 141 errata-xmlrpc 2026-05-14 19:23:54 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:17686 https://access.redhat.com/errata/RHSA-2026:17686

Comment 142 errata-xmlrpc 2026-05-19 13:01:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:19013 https://access.redhat.com/errata/RHSA-2026:19013

Comment 143 errata-xmlrpc 2026-05-19 13:18:23 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:18913 https://access.redhat.com/errata/RHSA-2026:18913

Comment 144 errata-xmlrpc 2026-05-20 03:50:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:19475 https://access.redhat.com/errata/RHSA-2026:19475

Comment 145 errata-xmlrpc 2026-05-20 11:54:32 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:17446 https://access.redhat.com/errata/RHSA-2026:17446

Comment 146 errata-xmlrpc 2026-05-20 13:06:05 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2026:19634 https://access.redhat.com/errata/RHSA-2026:19634

Comment 147 errata-xmlrpc 2026-05-20 13:31:06 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2026:17595 https://access.redhat.com/errata/RHSA-2026:17595

Comment 148 errata-xmlrpc 2026-06-01 02:07:08 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:22141 https://access.redhat.com/errata/RHSA-2026:22141

Comment 149 errata-xmlrpc 2026-06-02 11:08:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:22450 https://access.redhat.com/errata/RHSA-2026:22450

Comment 150 errata-xmlrpc 2026-06-03 08:00:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:22714 https://access.redhat.com/errata/RHSA-2026:22714

Comment 151 errata-xmlrpc 2026-06-03 18:49:37 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:22937 https://access.redhat.com/errata/RHSA-2026:22937

Comment 152 errata-xmlrpc 2026-06-04 13:10:36 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:23228 https://access.redhat.com/errata/RHSA-2026:23228

Comment 156 errata-xmlrpc 2026-06-11 13:32:08 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:25248 https://access.redhat.com/errata/RHSA-2026:25248

Comment 157 errata-xmlrpc 2026-06-11 13:45:26 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:25251 https://access.redhat.com/errata/RHSA-2026:25251

Comment 158 errata-xmlrpc 2026-06-11 13:47:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:25250 https://access.redhat.com/errata/RHSA-2026:25250

Comment 159 errata-xmlrpc 2026-06-11 13:49:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:25252 https://access.redhat.com/errata/RHSA-2026:25252

Comment 160 errata-xmlrpc 2026-06-11 13:50:33 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:25253 https://access.redhat.com/errata/RHSA-2026:25253

Comment 161 errata-xmlrpc 2026-06-22 20:59:09 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 17.1 for RHEL 9

Via RHSA-2026:28047 https://access.redhat.com/errata/RHSA-2026:28047

Comment 162 errata-xmlrpc 2026-06-25 08:55:05 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.12

Via RHSA-2026:26527 https://access.redhat.com/errata/RHSA-2026:26527

Comment 163 errata-xmlrpc 2026-06-25 10:52:25 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.13

Via RHSA-2026:26541 https://access.redhat.com/errata/RHSA-2026:26541

Comment 164 errata-xmlrpc 2026-07-01 11:22:24 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.14

Via RHSA-2026:28886 https://access.redhat.com/errata/RHSA-2026:28886

Comment 165 errata-xmlrpc 2026-07-06 12:56:07 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.15

Via RHSA-2026:28961 https://access.redhat.com/errata/RHSA-2026:28961

Comment 166 Christopher Lusk 2026-07-14 16:54:53 UTC

Added missing openshift-golang-builder affects for streams that were not covered:

- openshift-4.21 (builder affects previously stopped at 4.20)
- openshift-4.22 (newly active stream)
- cnv-4.22 (newly active stream)
- ossm-3.4 (newly active stream)

Existing builder affects covered openshift-4.12.z through 4.20, cnv-4.12 through 4.21, and ossm-2.6/3.0-3.3. The openshift-4.21 gap was a pre-existing omission. Created as AFFECTED/DELEGATED with brew.registry PURL format consistent with the golang_builder_affects tooling.

Context: Identified during review of Go stdlib CVE coverage for OCP 4.22 builder images (PSIRTSUPT-19030).

Comment 171 errata-xmlrpc 2026-07-29 21:11:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:47719 https://access.redhat.com/errata/RHSA-2026:47719

Comment 172 errata-xmlrpc 2026-07-29 21:44:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:47722 https://access.redhat.com/errata/RHSA-2026:47722

Comment 173 errata-xmlrpc 2026-07-29 21:46:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:47721 https://access.redhat.com/errata/RHSA-2026:47721

Comment 174 errata-xmlrpc 2026-07-29 22:02:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:47714 https://access.redhat.com/errata/RHSA-2026:47714

Comment 175 errata-xmlrpc 2026-07-29 22:04:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:47910 https://access.redhat.com/errata/RHSA-2026:47910

Comment 176 errata-xmlrpc 2026-07-29 22:14:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:47716 https://access.redhat.com/errata/RHSA-2026:47716

Comment 177 errata-xmlrpc 2026-07-29 22:19:01 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:47712 https://access.redhat.com/errata/RHSA-2026:47712

Comment 178 errata-xmlrpc 2026-07-29 22:41:35 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:48036 https://access.redhat.com/errata/RHSA-2026:48036

Comment 179 errata-xmlrpc 2026-08-03 02:00:58 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:49509 https://access.redhat.com/errata/RHSA-2026:49509

Comment 180 errata-xmlrpc 2026-08-03 06:29:33 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:49600 https://access.redhat.com/errata/RHSA-2026:49600

Comment 181 errata-xmlrpc 2026-08-04 10:00:00 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:49944 https://access.redhat.com/errata/RHSA-2026:49944

Comment 184 errata-xmlrpc 2026-08-06 20:28:58 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:51288 https://access.redhat.com/errata/RHSA-2026:51288